Typically you would use ElasticSearch to store and analyze large amounts of data which are of different structures and formats. An ElasticSearch cluster is composed of Clusters, Indices, Nodes, and Shards that help organize and manage how your data is stored. The data can then be efficiently and powerfully searched and analyzed.ElasticSearch is usually used as a Pipeline destination when your log data needs to be indexed for searching. By setting up a Pipeline for your ElasticSearch data, you can use Pipeline Processors like Dedupe and Remove Fields to clean data or drop it if it’s not valuable before sending it to ElasticSearch.
{"docsConfig":{"theme":"sequoia","$schema":"https://mintlify.com/docs.json","name":"Mezmo Docs","description":"Explore guides, APIs, tutorials, and reference materials for collecting telemetry and using Mezmo’s SRE agent to manage production environments.","colors":{"primary":"#7651B1","light":"#9383C2","dark":"#61479E"},"logo":{"light":"https://mintcdn.com/mezmo-9a59581a/sE5wVoxylhqwMKnd/logo/light.png?fit=max\u0026auto=format\u0026n=sE5wVoxylhqwMKnd\u0026q=85\u0026s=b13e2c408725cccd4440baf3946b6c09","dark":"https://mintcdn.com/mezmo-9a59581a/sE5wVoxylhqwMKnd/logo/dark.png?fit=max\u0026auto=format\u0026n=sE5wVoxylhqwMKnd\u0026q=85\u0026s=15689c7b45cfd432a0dc22bec6bef277","href":"https://www.mezmo.com"},"favicon":{"light":"https://mintcdn.com/mezmo-9a59581a/_O6UCP02AAKtg9-g/favicon-m-black.ico?fit=max\u0026auto=format\u0026n=_O6UCP02AAKtg9-g\u0026q=85\u0026s=ce37c8586093ca8e2cf55cbf7806d48f","dark":"https://mintcdn.com/mezmo-9a59581a/_O6UCP02AAKtg9-g/favicon-m-white.ico?fit=max\u0026auto=format\u0026n=_O6UCP02AAKtg9-g\u0026q=85\u0026s=85c63ddf57536f616405471d6268b681"},"appearance":{"default":"dark"},"background":{"color":{"light":"#F4F4F4","dark":"#0A090C"}},"navbar":{"primary":{"type":"button","label":"Get a Demo","href":"https://www.mezmo.com/demo-request"}},"footer":{"socials":{"x":"https://twitter.com/mezmodata","github":"https://github.com/mezmo","linkedin":"https://www.linkedin.com/company/mezmo"}},"fonts":{"family":"Onest","source":"fonts/onest-variable-latin.woff2","format":"woff2"},"contextual":{"options":["copy","view","assistant","mcp","download-spec"],"display":"header"},"styling":{"latex":false},"navigation":{"global":{"anchors":[{"anchor":"AURA","href":"/aura"},{"anchor":"Platform","href":"/mezmo-platform"}]},"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"mezmo-9a59581a","hasAudioNarration":false,"actualSubdomain":"mezmo-9a59581a","customDomains":["docs.mezmo.com"],"gitSource":{"type":"github","owner":"mezmo","repo":"documentation","deployBranch":"main","contentDirectory":"","isPrivate":false,"mountPath":"","label":""},"feedback":{"thumbs":true,"edits":true,"issues":true},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"REMOVE_BRANDING":{"status":"ENABLED"},"CONTEXTUAL_FEEDBACK":{"status":"ENABLED"},"CODE_SNIPPET_FEEDBACK":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6af0be9d10764caba8e8e5eb","clientVersion":"0.0.4102","searchFilterCounts":[{"language":"default","tag":"API References","count":230},{"language":"default","tag":"Mezmo API","count":229},{"language":"default","tag":"Telemetry Pipelines","count":125},{"language":"default","tag":"Log Management","count":118},{"language":"default","tag":"Other Topics","count":53},{"language":"default","tag":"Guides","count":41},{"language":"default","tag":"Pipeline Management","count":41},{"language":"default","tag":"Destinations","count":29},{"language":"default","tag":"AURA","count":24},{"language":"default","tag":"Processors","count":24}],"searchSettings":{"maxResults":10}},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"styles.css","content":":root,:root.dark,:root.light,html,html.dark,html.light,body{--primary: 118 81 177;--primary-light: 147 131 194;--primary-dark: 97 71 158;--purple-50: 232 228 241;--purple-100: 213 207 227;--purple-200: 194 187 211;--purple-300: 177 165 211;--purple-400: 147 131 194;--purple-500: 118 81 177;--purple-600: 97 71 158;--purple-700: 80 58 130;--purple-800: 67 52 101;--purple-900: 52 41 76;--purple-950: 40 34 52;--gray-50: 244 244 244;--gray-100: 230 230 229;--gray-200: 206 206 206;--gray-300: 183 183 183;--gray-400: 160 160 160;--gray-500: 137 137 137;--gray-600: 114 114 114;--gray-700: 91 91 91;--gray-800: 68 68 68;--gray-900: 45 45 45;--gray-950: 10 9 12;--background-light: 244 244 244;--background-dark: 10 9 12}:root{--color-primary: #7651B1;--color-primary-light: #9383C2;--color-primary-dark: #61479E}h1{font-weight:500!important}.card h2{font-size:1.3rem!important}.card a{font-size:1.125rem!important}.card a:hover{color:#9383c2!important;background-color:#9383c21a!important}.card{background-color:transparent!important}#body-content{background-color:#f4f4f4!important}.dark #body-content{background-color:#1b1a1c!important}#navbar{box-shadow:0 2px 5px #72727230!important}#body-content div.table{display:block;width:100%;min-width:0}#body-content table{width:100%;min-width:0;table-layout:auto}#body-content table th,#body-content table td,#body-content table a,#body-content table code{overflow-wrap:anywhere}@media (max-width: 640px){#body-content table th,#body-content table td{min-width:90px}}@font-face{font-family:'Onest';font-style:normal;font-display:swap;font-weight:100 900;src:url('/fonts/onest-variable-latin.woff2') format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD}@font-face{font-family:'Onest';font-style:normal;font-display:swap;font-weight:100 900;src:url('/fonts/onest-variable-latin-ext.woff2') format('woff2');unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF}.chat-assistant-floating-input{display:none}a[href=\"https://www.mezmo.com/demo-request\"]{background-color:#95C1CF!important;color:#031403!important}"}],"page":{"pagePath":"telemetry-pipelines/elasticsearch-destination","slug":"/telemetry-pipelines/elasticsearch-destination","pageMetadata":{"title":"ElasticSearch","description":"Send indexed log data to an ElasticSearch destination, with options for authentication strategy, compression, endpoints, and indices.","href":"/telemetry-pipelines/elasticsearch-destination"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Send indexed log data to an ElasticSearch destination, with options for authentication strategy, compression, endpoints, and indices.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,p:`p`,strong:`strong`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,..._provideComponents(),...props.components},{Heading,Table}=_components;if(!Heading)_missingMdxReference(`Heading`,true);if(!Table)_missingMdxReference(`Table`,true);return _jsxs(_Fragment,{children:[_jsx(Heading,{level:`2`,id:`description`,children:`Description`}),`\n`,_jsxs(_components.p,{children:[`Typically you would use ElasticSearch to store and analyze large amounts of data which are of different structures and formats. An ElasticSearch cluster is composed of `,_jsx(_components.strong,{children:`Clusters`}),`, `,_jsx(_components.strong,{children:`Indices`}),`, `,_jsx(_components.strong,{children:`Nodes`}),`, and `,_jsx(_components.strong,{children:`Shards`}),` that help organize and manage how your data is stored. The data can then be efficiently and powerfully searched and analyzed.`]}),`\n`,_jsxs(_components.p,{children:[`ElasticSearch is usually used as a Pipeline destination when your log data needs to be indexed for searching. By setting up a Pipeline for your ElasticSearch data, you can use Pipeline Processors like `,_jsx(_components.a,{href:`/telemetry-pipelines/dedupe-processor`,children:`Dedupe`}),` and `,_jsx(_components.a,{href:`/telemetry-pipelines/drop-fields-processor`,children:`Remove Fields`}),` to clean data or drop it if it’s not valuable before sending it to ElasticSearch.`]}),`\n`,_jsx(Heading,{level:`2`,id:`configuration-options`,children:`Configuration Options`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Option`}),_jsx(_components.th,{children:`Description`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`End-to-End Acknowledgement`}),_jsx(_components.td,{children:`Enable this option to receive verification that log data is being received by ElasticSearch.`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Compression`}),_jsx(_components.td,{children:`Compression type to apply to your log data.`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Strategy`}),_jsxs(_components.td,{children:[`The authentication strategy of your ElasticSearch destination, with options for `,_jsx(_components.strong,{children:`Basic`}),` and `,_jsx(_components.strong,{children:`AWS`}),`.`]})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Endpoints`}),_jsx(_components.td,{children:`The full URLs of the ElasticSearch destinations.`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Pipeline`}),_jsx(_components.td,{children:`The name of the ElasticSearch ingest pipeline to use.`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Custom Index`}),_jsx(_components.td,{children:`The index name or pattern of the ElasticSearch destination.`})]})]})]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"ElasticSearch","description":"Send indexed log data to an ElasticSearch destination, with options for authentication strategy, compression, endpoints, and indices.","href":"/telemetry-pipelines/elasticsearch-destination"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"Description","slug":"description","depth":2,"children":[]},{"title":"Configuration Options","slug":"configuration-options","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":["/_mintlify/custom/mezmo-9a59581a/d59c88e19f3b7ece/tag-loader.js"],"subdomain":"mezmo-9a59581a","siteName":"Mezmo Docs","title":"ElasticSearch - Mezmo Docs","relatedPagesConfig":{"enabled":false,"limit":5,"mode":"automatic"},"navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-02T19:35:05.908Z","originalFileLocation":"telemetry-pipelines/elasticsearch-destination.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"dark\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Send indexed log data to an ElasticSearch destination, with options for authentication strategy, compression, endpoints, and indices.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Mezmo Docs\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"ElasticSearch - Mezmo Docs\">\u003cmeta data-mint-head property=\"og:description\" content=\"Send indexed log data to an ElasticSearch destination, with options for authentication strategy, compression, endpoints, and indices.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Mezmo Docs\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://mezmo-9a59581a.mintlify.site/_mintlify/api/og/v2?division=Destinations\u0026amp;title=ElasticSearch\u0026amp;description=Send+indexed+log+data+to+an+ElasticSearch+destination%2C+with+options+for+authentication+strategy%2C+compression%2C+endpoints%2C+and+indices.\u0026amp;theme=a59e00849ca103d3c6637d5d\u0026amp;signature=de44bb9db5446c5685d81c568625ef65079178e27c733203bf94403839f243c6\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"ElasticSearch - Mezmo Docs\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Send indexed log data to an ElasticSearch destination, with options for authentication strategy, compression, endpoints, and indices.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://mezmo-9a59581a.mintlify.site/_mintlify/api/og/v2?division=Destinations\u0026amp;title=ElasticSearch\u0026amp;description=Send+indexed+log+data+to+an+ElasticSearch+destination%2C+with+options+for+authentication+strategy%2C+compression%2C+endpoints%2C+and+indices.\u0026amp;theme=a59e00849ca103d3c6637d5d\u0026amp;signature=de44bb9db5446c5685d81c568625ef65079178e27c733203bf94403839f243c6\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/mezmo-9a59581a/ppdPJ3sw5zB9GptH/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Mezmo Docs\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#7651B1\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/telemetry-pipelines/elasticsearch-destination.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.mezmo.com/#organization\",\"name\":\"Mezmo Docs\",\"url\":\"https://docs.mezmo.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/mezmo-9a59581a/sE5wVoxylhqwMKnd/logo/light.png?fit=max\u0026auto=format\u0026n=sE5wVoxylhqwMKnd\u0026q=85\u0026s=b13e2c408725cccd4440baf3946b6c09\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.mezmo.com#website\",\"name\":\"Mezmo Docs\",\"url\":\"https://docs.mezmo.com\",\"publisher\":{\"@id\":\"https://docs.mezmo.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination#webpage\",\"url\":\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination\",\"name\":\"ElasticSearch\",\"description\":\"Send indexed log data to an ElasticSearch destination, with options for authentication strategy, compression, endpoints, and indices.\",\"dateModified\":\"2026-10-02T19:35:05.908Z\",\"isPartOf\":{\"@id\":\"https://docs.mezmo.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Destinations\",\"item\":\"https://docs.mezmo.com/telemetry-pipelines/set-up-pipeline-destinations\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ElasticSearch\",\"item\":\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination#article\",\"headline\":\"ElasticSearch\",\"name\":\"ElasticSearch\",\"description\":\"Send indexed log data to an ElasticSearch destination, with options for authentication strategy, compression, endpoints, and indices.\",\"url\":\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination\",\"mainEntityOfPage\":{\"@id\":\"https://docs.mezmo.com/telemetry-pipelines/elasticsearch-destination#webpage\"},\"dateModified\":\"2026-10-02T19:35:05.908Z\",\"publisher\":{\"@id\":\"https://docs.mezmo.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.mezmo.com#website\"}}]}\u003c/script>","agentPointerHref":"/telemetry-pipelines/elasticsearch-destination.md","siteName":"Mezmo Docs","nav":{"global":{"anchors":[{"anchor":"AURA","href":"/aura"},{"anchor":"Platform","href":"/mezmo-platform"}]},"tabs":[{"tab":"Home","pages":[{"title":"Home","href":""}]},{"tab":"AURA","pages":[{"title":"AURA","href":"/aura"}]},{"tab":"Platform","pages":[{"title":"Platform","href":"/mezmo-platform"}]},{"tab":"Log Management","pages":[{"title":"Log Management","href":"/docs/about-mezmo-log-analysis"}]},{"tab":"Telemetry Pipelines","groups":[{"group":"About Pipelines","pages":[{"title":"About Mezmo Telemetry Pipelines","href":"/telemetry-pipelines/about-mezmo-telemetry-pipelines"},{"title":"Getting Started with Mezmo Telemetry Pipelines","href":"/telemetry-pipelines/getting-started-with-mezmo-telemetry-pipeline"},{"title":"Build and Deploy a Mezmo Telemetry Pipeline","href":"/telemetry-pipelines/build-deploy-mezmo-pipeline"},{"title":"View and Sample Pipeline Data","href":"/telemetry-pipelines/view-pipeline-data"},{"title":"Monitor Pipeline Data Volume","href":"/telemetry-pipelines/monitor-data-pipelines"},{"title":"About Mezmo Trial Accounts","href":"/telemetry-pipelines/about-mezmo-trial"},{"title":"Configure Responsive Pipelines","href":"/telemetry-pipelines/configure-responsive-pipelines"},{"title":"Replay Buffered Data","href":"/telemetry-pipelines/replay-buffered-data"},{"title":"Shared Sources","href":"/telemetry-pipelines/shared-sources"},{"title":"Create a Data Profile","href":"/telemetry-pipelines/data-profiling"},{"title":"About Mezmo Flow","href":"/telemetry-pipelines/about-mezmo-flow"}]},{"group":"Sources","root":{"title":"Set Up Pipeline Sources","href":"/telemetry-pipelines/set-up-pipeline-sources"},"directory":"accordion","pages":[{"title":"Azure Event Hub","href":"/telemetry-pipelines/azure-event-hub-source"},{"title":"Demo Logs","href":"/telemetry-pipelines/demo-logs-source"},{"title":"FluentD and FluentBit","href":"/telemetry-pipelines/fluent-source"},{"title":"HTTP","href":"/telemetry-pipelines/http-source"},{"title":"HTTP Client","href":"/telemetry-pipelines/http-client-source"},{"title":"Kafka","href":"/telemetry-pipelines/kafka-source"},{"title":"AWS Kinesis Firehose","href":"/telemetry-pipelines/kinesis-firehose-source"},{"title":"Mezmo Log Analysis Ingestion","href":"/telemetry-pipelines/log-analysis-ingestion-source"},{"title":"Mezmo Log Analysis","href":"/telemetry-pipelines/log-analysis-source"},{"title":"Mezmo Agent","href":"/telemetry-pipelines/mezmo-agent-source"},{"title":"Datadog Agent","href":"/telemetry-pipelines/mezmo-datadog-source-source"},{"title":"Datadog Agent V2","href":"/telemetry-pipelines/mezmo-datadog-source-v2-source"},{"title":"OpenTelemetry Source","href":"/telemetry-pipelines/open-telemetry-source"},{"title":"Pipeline Data Restoration","href":"/telemetry-pipelines/pipeline-data-restoration-source"},{"title":"Logstash","href":"/telemetry-pipelines/logstash-source"},{"title":"Prometheus Remote Write","href":"/telemetry-pipelines/prometheus-remote-write-source"},{"title":"AWS S3 via SQS","href":"/telemetry-pipelines/s3-source"},{"title":"Splunk HEC","href":"/telemetry-pipelines/splunk-hec-source"},{"title":"Syslog over HTTP","href":"/telemetry-pipelines/syslog-over-http-pipeline-source"},{"title":"AWS SQS","href":"/telemetry-pipelines/sqs-source"},{"title":"Webhook (WebSub)","href":"/telemetry-pipelines/webhook-source"}]},{"group":"Processors","root":{"title":"Set Up Pipeline Processors","href":"/telemetry-pipelines/set-up-pipeline-processors"},"directory":"accordion","pages":[{"title":"Aggregate Processor","href":"/telemetry-pipelines/aggregate-processor"},{"title":"Compact Fields Processor","href":"/telemetry-pipelines/compact-fields-processor"},{"title":"Data Profiler Processor","href":"/telemetry-pipelines/data-profiler-processor"},{"title":"Decrypt Field Processor","href":"/telemetry-pipelines/decrypt-fields-processor"},{"title":"Remove Fields Processor","href":"/telemetry-pipelines/drop-fields-processor"},{"title":"Dedupe Processor","href":"/telemetry-pipelines/dedupe-processor"},{"title":"Encrypt Field Processor","href":"/telemetry-pipelines/encrypt-fields-processor"},{"title":"Event to Metric Processor","href":"/telemetry-pipelines/event-to-metric-processor"},{"title":"Filter Processor","href":"/telemetry-pipelines/filter-processor"},{"title":"Flatten Fields Processor","href":"/telemetry-pipelines/flatten-fields-processor"},{"title":"Script Execution Processor","href":"/telemetry-pipelines/js-script-processor"},{"title":"Map Fields Processor","href":"/telemetry-pipelines/map-fields-processor"},{"title":"Tag Cardinality Limit Processor","href":"/telemetry-pipelines/metrics-tag-cardinality-limit-processor"},{"title":"Parse Processor","href":"/telemetry-pipelines/parse-processor"},{"title":"Parse Sequentially Processor","href":"/telemetry-pipelines/parse-sequentially-processor"},{"title":"Redact Processor","href":"/telemetry-pipelines/redact-processor"},{"title":"Reduce Processor","href":"/telemetry-pipelines/reduce-processor"},{"title":"Route Processor","href":"/telemetry-pipelines/route-processor"},{"title":"Sample Processor","href":"/telemetry-pipelines/sample-processor"},{"title":"Set Timestamp Processor","href":"/telemetry-pipelines/set-timestamp-processor"},{"title":"Stringify Processor","href":"/telemetry-pipelines/stringify-processor"},{"title":"Throttle Processor","href":"/telemetry-pipelines/throttle-processor"},{"title":"Trace Sampling Processor","href":"/telemetry-pipelines/trace-sampling-processor"},{"title":"Unroll Processor","href":"/telemetry-pipelines/unroll-processor"}]},{"group":"Destinations","root":{"title":"Set Up Pipeline Destinations","href":"/telemetry-pipelines/set-up-pipeline-destinations"},"directory":"accordion","pages":[{"title":"Azure Blob Storage","href":"/telemetry-pipelines/azure-blob-storage-destination"},{"title":"Blackhole","href":"/telemetry-pipelines/blackhole-destination"},{"title":"Checkly","href":"/telemetry-pipelines/checkly-destination"},{"title":"AWS CloudWatch Metrics","href":"/telemetry-pipelines/cloudwatch-metrics-destination"},{"title":"AWS CloudWatch Logs","href":"/telemetry-pipelines/cloudwatch-logs-destination"},{"title":"Datadog Logs","href":"/telemetry-pipelines/datadog-logs-destination"},{"title":"Datadog Metrics","href":"/telemetry-pipelines/datadog-metrics-destination"},{"title":"Datadog Traces","description":"Send Pipeline trace data to Datadog, configuring the API key, compression, and Datadog site region.","href":"/telemetry-pipelines/datadog-traces-destination"},{"title":"ElasticSearch","href":"/telemetry-pipelines/elasticsearch-destination"},{"title":"Google Cloud Storage","description":"Send Mezmo Pipeline log data to a Google Cloud Storage bucket with configurable encoding, compression, batching, and credentials.","href":"/telemetry-pipelines/gcp-cloud-storage-destination"},{"title":"Google Cloud Monitoring","href":"/telemetry-pipelines/gcp-cloud-monitoring-destination"},{"title":"Google Cloud Operations","href":"/telemetry-pipelines/gcp-cloud-operations-destination"},{"title":"Google Cloud PubSub","href":"/telemetry-pipelines/gcp-cloud-pubsub-destination"},{"title":"Honeycomb Logs","href":"/telemetry-pipelines/honeycomb-logs-destination"},{"title":"HTTP Endpoint","href":"/telemetry-pipelines/http-destination"},{"title":"Kafka","href":"/telemetry-pipelines/kafka-destination"},{"title":"AWS Kinesis Data Firehose","href":"/telemetry-pipelines/kinesis-firehose-destination"},{"title":"AWS Kinesis Streams","href":"/telemetry-pipelines/kinesis-streams-destination"},{"title":"Loki","href":"/telemetry-pipelines/loki-destination"},{"title":"Mezmo Archive Destination","href":"/telemetry-pipelines/mezmo-archive-destination"},{"title":"Mezmo Log Analysis","href":"/telemetry-pipelines/mezmo-destination"},{"title":"New Relic","href":"/telemetry-pipelines/new-relic-destination"},{"title":"Notification Channel","href":"/telemetry-pipelines/notification-channel-destination"},{"title":"OpenTelemetry Destination","href":"/telemetry-pipelines/open-telemetry-destination"},{"title":"Prometheus Remote Write","href":"/telemetry-pipelines/prometheus-remote-write-destination"},{"title":"AWS S3 Storage","href":"/telemetry-pipelines/s3-destination"},{"title":"Splunk HTTP Event Collector","href":"/telemetry-pipelines/splunk-hec-logs-destination"},{"title":"AWS SQS","href":"/telemetry-pipelines/sqs-destination"},{"title":"Sumo Logic Logs","href":"/telemetry-pipelines/sumo-logic-logs-destination"}]},{"group":"Pipeline Management","pages":[{"title":"Edit or Delete a Pipeline","href":"/telemetry-pipelines/edit-a-pipeline"},{"title":"Export and Import a Pipeline Manifest","href":"/telemetry-pipelines/export-import-pipeline-manifest"},{"title":"Pipeline Event Data Model","href":"/telemetry-pipelines/pipeline-event-data-model"},{"title":"Simulate and Test Pipeline Data Streams","href":"/telemetry-pipelines/simulate-pipeline-data-flows"},{"title":"Set Pipeline Access","href":"/telemetry-pipelines/set-pipeline-access"},{"title":"The Pipeline Metric Data Model","href":"/telemetry-pipelines/metric-data-within-the-pipeline"},{"title":"View Pipeline Errors","href":"/telemetry-pipelines/view-pipeline-errors"},{"title":"Demo Pipeline Overview","href":"/telemetry-pipelines/demo-pipeline-guide"},{"title":"Set Threshold Alerts for Pipeline Data Volume","href":"/telemetry-pipelines/pipeline-threshold-alerts"},{"title":"Build a Mezmo Telemetry Pipeline with Terraform","href":"/telemetry-pipelines/build-pipelines-terraform"},{"title":"Syntax for Editing Pipeline Component Configuration Values","href":"/telemetry-pipelines/syntax-for-editing-pipeline-component-configuration-values"},{"title":"Pipeline Example: Kubernetes Telemetry Data Optimization","href":"/telemetry-pipelines/pipeline-architecture-for-kubernetes-data-optimizationzlz"},{"title":"Required Schema for Mezmo Log Analysis Destination","href":"/telemetry-pipelines/required-schema-for-mezmo-log-analysis-destination"},{"title":"Azure Event Hub","href":"/telemetry-pipelines/kafka-aeh"},{"title":"How to Create a Shared Source from Scratch","href":"/telemetry-pipelines/how-to-create-shared-sources"},{"title":"What Are Shared Sources?","href":"/telemetry-pipelines/shared-sources-overview"},{"title":"Primary Ingestion Pipeline","href":"/telemetry-pipelines/the-log-analysis-source-data-pipeline"},{"title":"How to Convert an Existing Source into a Shared Source","href":"/telemetry-pipelines/how-to-convert-existing-source-to-shared"},{"title":"How to Use a Shared Source in a Pipeline","href":"/telemetry-pipelines/how-to-use-shared-source-in-pipeline"},{"title":"Sudden Increase in Source Volume","href":"/telemetry-pipelines/sudden-increase-in-source-volume"},{"title":"OpenTelemetry Collector","href":"/telemetry-pipelines/otel-collector"},{"title":"OpenTelemetry event shapes","href":"/telemetry-pipelines/opentelemetry-event-shapes"},{"title":"Send LLM and AI Agent Traces with OpenTelemetry","href":"/telemetry-pipelines/llm-agent-traces-opentelemetry"},{"title":"Create Processor Groups","href":"/telemetry-pipelines/create-processor-groups"},{"title":"Percentage Volume Increase","href":"/telemetry-pipelines/percentage-volume-increase"}]},{"group":"Other Topics","pages":[{"title":"Set Up and Test an HTTP Endpoint Source","href":"/telemetry-pipelines/set-up-and-process-http-endpoint-data"},{"title":"Grok Pattern Reference","href":"/telemetry-pipelines/using-grok-to-parse"},{"title":"Error Code Reference","href":"/telemetry-pipelines/error-code-reference"},{"title":"Archive and Restore Telemetry Data","href":"/telemetry-pipelines/archive-restore-data"},{"title":"In-Stream Alerts","href":"/telemetry-pipelines/in-stream-alerts"},{"title":"Set In-Stream Alerts for Pipeline Nodes","href":"/telemetry-pipelines/set-in-stream-alerts"},{"title":"Example In-Stream Alert Configurations","href":"/telemetry-pipelines/example-in-stream-alert-configurations"},{"title":"Getting Started with the Mezmo Platform","href":"/telemetry-pipelines/getting-started-with-the-mezmo-platform"},{"title":"View Event Metrics","href":"/telemetry-pipelines/view-event-metrics"},{"title":"Set Surge Detection Alerts","href":"/telemetry-pipelines/configure-surge-detection-alerts"},{"title":"Tutorial: Create a Basic Data Archiving and Restoration Pipeline","href":"/telemetry-pipelines/archive-restore-data-tutorial"},{"title":"High Error Rate","href":"/telemetry-pipelines/high-error-rate"},{"title":"Presence of Personally Identifying Information (PII)","href":"/telemetry-pipelines/presence-of-personally-identifying-information--pii-"},{"title":"OpenTelemetry Collector","href":"/telemetry-pipelines/otel-collector"},{"title":"AWS CloudWatch Logs","href":"/telemetry-pipelines/aws-cloudwatch-logs"},{"title":"Checkly","href":"/telemetry-pipelines/checkly"}]}]},{"tab":"Mezmo Edge","pages":[{"title":"Mezmo Edge","href":"/mezmo-edge/mezmo-edge-pipelines-for-local-data"}]},{"tab":"Guides","pages":[{"title":"Guides","href":"/OptTutorial/1-intro"}]},{"tab":"API References","pages":[{"title":"API References","href":"/docs/api"}]}]},"basePath":"","title":"ElasticSearch - Mezmo Docs","buildId":"dpl_596ePT575z4qnAFksq1biRW97aLY","deploymentId":"dpl_596ePT575z4qnAFksq1biRW97aLY","dynamics":[],"chunks":[]}